Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GXhcrb-vbLvg6tThXlPW8eUz4Lw.roa
File: GXhcrb-vbLvg6tThXlPW8eUz4Lw.roa (raw, json)
Hash identifier: sv5Kxb4btO/ps8kvI865sL7pFjNV/yowxbhlW9v7KCo=
Subject key identifier: 19:78:5C:AD:BF:AF:6C:BB:E0:EA:D4:E1:5E:53:D6:F1:E5:33:E0:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4092
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GXhcrb-vbLvg6tThXlPW8eUz4Lw.roa
Signing time: Sun 14 Apr 2024 16:22:52 +0000
ROA not before: Sun 14 Apr 2024 16:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16530 (0x4092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 16:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=19785CADBFAF6CBBE0EAD4E15E53D6F1E533E0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:e4:47:7f:12:75:e7:29:00:d5:f8:30:08:
bc:c1:50:66:e7:aa:5b:95:54:b3:29:f5:e2:96:78:
43:c5:b1:7a:79:f9:bf:8c:5c:8c:0e:95:1e:5f:e7:
35:ac:a9:5e:2a:1c:e0:3a:20:6e:af:7b:70:2e:32:
c0:c1:14:8a:b9:53:2f:9e:4b:52:68:32:94:2e:a3:
29:d6:82:6c:80:15:1e:37:f6:de:e8:ff:0a:ca:ce:
19:1f:ec:9e:e8:a8:74:e3:30:9f:08:51:1f:d7:fd:
3a:cc:60:ca:6f:35:89:89:ac:82:f2:77:04:b6:01:
91:f1:ce:32:11:1c:e6:09:2d:d3:ce:3c:70:c0:74:
8e:34:0f:74:40:09:f7:c7:1a:15:a1:1a:31:56:5b:
32:0a:e2:45:1e:21:05:06:b5:01:44:8c:a6:02:67:
9b:0d:34:6e:10:3c:23:16:af:c0:3b:71:ae:da:92:
19:7b:aa:32:04:9d:28:d2:71:7e:59:6e:25:df:5d:
18:3c:00:f8:80:84:ef:c1:2f:c5:a9:3e:28:18:dc:
31:37:0c:fb:2d:c0:ca:29:b6:51:ff:30:c7:54:42:
58:b0:20:b0:8d:03:f3:17:dc:fc:73:29:d5:31:fe:
49:b9:e8:9b:15:3b:2b:12:88:05:4e:27:cb:ae:c8:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:5C:AD:BF:AF:6C:BB:E0:EA:D4:E1:5E:53:D6:F1:E5:33:E0:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GXhcrb-vbLvg6tThXlPW8eUz4Lw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:b4:dc:2f:e3:59:9c:27:24:29:85:5c:e2:22:13:e6:0d:bf:
70:2e:35:f5:d8:5a:84:37:70:d3:31:0b:b2:5f:44:2a:81:fb:
1f:35:e2:f8:30:e3:50:7f:58:fc:3a:92:2c:82:74:cd:1b:d6:
d7:1f:91:da:73:5f:ab:b3:15:a2:82:76:cd:dc:06:1b:20:8a:
ab:c0:c6:83:77:a0:7b:92:ec:2d:86:21:43:0a:6f:97:53:64:
1f:bd:b1:24:76:5b:2e:67:69:15:8a:18:f1:06:9a:1a:f3:71:
de:09:d4:e8:5b:35:54:88:94:d2:aa:29:da:d8:a7:9b:fe:0a:
f1:64:9d:df:19:68:4b:08:33:f2:1e:a2:c1:2f:f8:6a:de:a2:
e3:f6:6f:2c:46:a4:52:ae:27:67:0f:00:74:ea:c6:0f:a1:9e:
5f:12:30:79:77:55:e3:94:1c:fe:6e:83:4f:00:1d:2b:a4:f8:
66:f5:d1:33:96:66:25:0f:1d:8d:2f:19:b8:8a:5b:ef:4a:a8:
99:e0:b7:c2:0d:24:d2:02:ad:b5:94:59:1d:d5:3c:08:33:97:
75:49:b8:0e:1f:ae:34:fa:ed:58:a3:6a:90:7e:64:d5:cf:10:
74:58:5e:22:11:3b:f2:5e:ce:5f:87:31:78:9b:f1:92:47:19:
8a:09:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org